PinkDraconian/CVE-2021-39433

PinkDraconian/CVE-2021-39433

GitHubGitHub
GitHubgithub.com
Releases0
Stars5
BIQS IT Biqs-drive v1.83
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2021-39433↗
7.5 HIGH5 MEDIUM

A local file inclusion (LFI) vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-user.